<div>
<div class="content wysiwyg-content">
I've been tasked in setting up an FTP server that will allow people on the outide of our network to log into a server &amp;&nbsp;download documents. I know all the internals of setting up the external IP, bla bla bla....I'm just needing to get a better understanding on security &amp;&nbsp;some experts opinions. Should I use Linux or Windows FTP server? What are some recomendations? I basically just want to be able to upload a document from my LAN to one of our internal FTP servers. Then in turn, let someone else on the outside know the external FTP IP address &amp;&nbsp;a password so they can log into it &amp;&nbsp;download it. I need it to be of the utmost secure environment...thanks for any input.
</div>
</div>


I've been tasked in setting up an FTP server that will allow people on the outide of our network to log into a server & download documents. I know all the internals of setting up the external IP, bla bla bla....I'm just needing to get a better understanding on security & some experts opinions. Should I use Linux or Windows FTP server? What are some recomendations? I basically just want to be able to upload a document from my LAN to one of our internal FTP servers. Then in turn, let someone else on the outside know the external FTP IP address & a password so they can log into it & download it. I need it to be of the utmost secure environment...thanks for any input.

Secure FTP server

The Linux operating system, in all its flavors, has its own share of security flaws that allow intrusions, but there are various mechanisms by which these flaws can be removed, generally divided into two parts: authentication and access control. Authentication is responsible for ensuring that a user requesting access to the system is really the user with the account, while access control is responsible for controlling which resources each account has access to and what kind of access is permitted.

Linux Security

IIS is Internet Information Services, the web server included with Windows Server operating systems. All current versions are built on a modular architecture; modules can be added or removed individually so that those required for specific functionality are installed. The full installation of IIS includes HTTP, security, content, compression, caching, logging and diagnostics.

Microsoft IIS Web Server

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.